$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/11DE1CDA467611EC988CDC09C4F9AE02.roa File: 11DE1CDA467611EC988CDC09C4F9AE02.roa (raw, json) Hash identifier: Xj5Qy789mJaiAcI+C7hmnOQRIBKOGzpsW/xGSyO3hqY= Subject key identifier: C4:CC:CD:75:AE:CE:81:9C:E0:3B:7F:9F:9F:85:74:D9:06:C1:75:91 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 22FD Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/11DE1CDA467611EC988CDC09C4F9AE02.roa Signing time: Sat 26 Sep 2026 16:28:26 +0000 ROA not before: Sat 26 Sep 2026 16:28:26 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 58955 IP address blocks: 43.230.27.0/24 maxlen: 24 2407:8100:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 15:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8957 (0x22fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Sep 26 16:28:26 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab7f2aa-7333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:64:9a:59:68:ff:0b:2b:43:0c:be:53:78: c6:c5:ff:1d:06:44:c8:4d:94:c4:19:35:1e:e1:ef: bc:32:7a:6a:bc:56:51:c7:aa:ea:68:62:67:ff:79: bf:5e:0a:59:8b:81:41:c5:13:0c:fa:2e:69:fa:0b: a4:50:72:9b:30:18:d0:de:0e:58:ca:76:f5:a5:26: 13:2e:17:cc:c8:d6:28:a1:69:22:66:af:44:80:10: c3:07:16:48:15:8b:de:31:07:1b:c5:7d:2e:5d:43: 67:9b:bd:f5:6a:b2:92:3a:e9:75:a6:8b:d3:90:c0: 2f:2b:c9:ab:54:9d:cf:72:1c:12:ae:32:b8:bb:f6: 81:cd:1e:a5:09:34:08:1a:49:04:ba:00:dc:42:d4: 97:d8:a4:d6:66:f5:6b:c7:e1:96:6d:42:e6:c8:f0: b0:d1:bb:cc:c7:70:b2:a8:3f:47:39:ec:1a:0c:d3: 67:dd:7b:c6:fe:fe:58:50:56:28:df:5d:a9:64:c9: 0d:66:24:66:03:61:21:3d:c5:44:37:0d:ba:7c:f6: 70:50:40:c1:97:8f:2f:f1:04:38:f4:df:9c:a8:a2: 04:24:1d:39:cc:1a:8c:32:00:74:ef:81:a8:82:63: 1d:ea:3e:80:73:44:9f:8e:5b:38:6e:e9:5a:51:95: b3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CC:CD:75:AE:CE:81:9C:E0:3B:7F:9F:9F:85:74:D9:06:C1:75:91 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/11DE1CDA467611EC988CDC09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.27.0/24 IPv6: 2407:8100:2::/48 Signature Algorithm: sha256WithRSAEncryption 94:e1:97:cc:8d:32:af:b8:b5:65:ed:6b:14:04:ce:bf:bf:e8: 13:65:af:16:f1:e5:29:99:1a:27:98:66:e8:2a:b0:fb:a0:14: 59:2f:ac:e8:d9:64:ce:78:9b:54:87:9a:ce:03:47:9a:1c:bb: b5:5d:50:1c:ee:d2:53:01:e2:93:29:48:9f:3c:46:75:fe:6a: 0a:0c:2c:7c:83:86:ca:8c:e6:61:15:5f:5d:12:f0:58:5a:7d: 13:8b:8b:0e:39:b8:ce:a9:d7:9c:39:43:bf:03:0c:cf:41:54: 07:0f:e7:a9:5e:37:bc:9d:35:2a:b0:38:b0:42:68:c7:c1:9c: 59:b1:09:2c:37:f0:a1:b2:ac:37:52:4c:e8:50:62:77:bc:17: d9:ad:67:9a:1b:15:12:78:36:d5:1e:ab:ec:f6:2b:d9:ca:94: fe:bb:1d:65:a0:0d:a1:d2:20:bc:79:4e:41:89:3f:b3:eb:81: 8a:fe:c1:6b:83:b9:0b:20:85:b4:7a:60:bc:3c:3e:de:81:95: a1:ad:8e:d3:c6:ba:58:da:ac:b1:d2:f8:11:0e:cd:f2:53:5f: 64:a2:16:46:32:da:11:4a:b7:7a:95:63:29:77:55:1c:3d:98: 9c:ef:cc:84:9d:c8:03:cb:6d:a3:47:fc:a3:77:95:cf:16:fc: fa:e9:36:89 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICIv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjYwOTI2MTYyODI2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI3ZjJhYS03MzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkFkmllo/wsrQwy+U3jGxf8dBkTITZTEGTUe4e+8MnpqvFZRx6rqaGJn/3m/ XgpZi4FBxRMM+i5p+gukUHKbMBjQ3g5Yynb1pSYTLhfMyNYooWkiZq9EgBDDBxZI FYveMQcbxX0uXUNnm731arKSOul1povTkMAvK8mrVJ3PchwSrjK4u/aBzR6lCTQI GkkEugDcQtSX2KTWZvVrx+GWbULmyPCw0bvMx3CyqD9HOewaDNNn3XvG/v5YUFYo 312pZMkNZiRmA2EhPcVENw26fPZwUEDBl48v8QQ49N+cqKIEJB05zBqMMgB074Go gmMd6j6Ac0Sfjls4bulaUZWz2wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMTMzXWu zoGc4Dt/n5+FdNkGwXWRMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvMTFERTFDREE0 Njc2MTFFQzk4OENEQzA5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAK+YbMA8EAgACMAkDBwAkB4EAAAIwDQYJKoZIhvcNAQELBQADggEB AJThl8yNMq+4tWXtaxQEzr+/6BNlrxbx5SmZGieYZugqsPugFFkvrOjZZM54m1SH ms4DR5ocu7VdUBzu0lMB4pMpSJ88RnX+agoMLHyDhsqM5mEVX10S8FhafROLiw45 uM6p15w5Q78DDM9BVAcP56leN7ydNSqwOLBCaMfBnFmxCSw38KGyrDdSTOhQYne8 F9mtZ5obFRJ4NtUeq+z2K9nKlP67HWWgDaHSILx5TkGJP7PrgYr+wWuDuQsghbR6 YLw8Pt6BlaGtjtPGuljarLHS+BEOzfJTX2SiFkYy2hFKt3qVYyl3VRw9mJzvzISd yAPLbaNH/KN3lc8W/PrpNok= -----END CERTIFICATE-----Generated at Tue Oct 13 19:26:11 2026 by rpki-client